1 min read

UK to mandate IoT security-by-design in upcoming legislation

Filip TRUȚĂ

January 31, 2020

Ad One product to protect all your devices, without slowing them down.
Free 90-day trial
UK to mandate IoT security-by-design in upcoming legislation

Just as it’s about to leave the European Union, the United Kingdom has announced plans to deliver new legislation that aims to strengthen the security of connected smart products in Europe.

The UK government first hinted at the upcoming regulation in 2018, when it put forth a document outlining the Secure by Design Code of Practice for consumer IoT security. The document was intended to help vendors ensure hackers can’t easily compromise their products.

Digital Minister Matt Warman announced this week that a new law is being prepared based on the security-by-design principle, which includes three main security requirements for the Internet of Things (IoT):

  • All consumer internet-connected device passwords must be unique and not resettable to any universal factory setting
  • Manufacturers of consumer IoT devices must provide a public point of contact so anyone can report a vulnerability and it will be acted on in a timely manner
  • Manufacturers of consumer IoT devices must state, either in store or online, how long the device will receive security updates at the point of sale

“We want to make the UK the safest place to be online with pro-innovation regulation that breeds confidence in modern technology,” Digital Minister Matt Warman said. “Our new law will hold firms manufacturing and selling internet-connected devices to account and stop hackers threatening people’s privacy and safety. It will mean robust security standards are built in from the design stage and not bolted on as an afterthought.”

The plans, which set a new standard for best practice requirements for IoT vendors, were drawn up by the Department for Digital, Culture, Media and Sport (DCMS) in conjunction with the business industry and the National Cyber Security Centre.

The UK government plans ongoing discussions with all parties involved to keep improving the legislation even after it goes into effect. No deadline was given, with the UK government only saying it “aims to deliver this legislation as soon as possible.”

tags


Author



Right now

Top posts

Ultimate Privacy Guide for Your Facebook Account

Ultimate Privacy Guide for Your Facebook Account

August 31, 2021

6 min read
7 Signs It’s Time to Use Parental Controls On Your Family’s Devices

7 Signs It’s Time to Use Parental Controls On Your Family’s Devices

August 27, 2021

2 min read
Your Netflix Account May Be on Sale on Darkweb. Protect It

Your Netflix Account May Be on Sale on Darkweb. Protect It

August 13, 2021

3 min read
E-mails claiming your computer was hacked and your privacy exposed - what you need to know (spoiler: you can relax - they’re bluffing)

E-mails claiming your computer was hacked and your privacy exposed - what you need to know (spoiler: you can relax - they’re bluffing)

July 29, 2021

5 min read
Watch Out for These Ongoing Bank of America Phishing Campaigns Targeting Customers in the US

Watch Out for These Ongoing Bank of America Phishing Campaigns Targeting Customers in the US

July 16, 2021

3 min read
How to protect yourself against cyberstalking

How to protect yourself against cyberstalking

July 06, 2021

2 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

Dutch Police Send Warning Letter to Customers of DDoS-for-Hire Website Dutch Police Send Warning Letter to Customers of DDoS-for-Hire Website
Silviu STAHIE

October 15, 2021

1 min read
Australia Proposes Bold Plan to Fight Ransomware Attackers Australia Proposes Bold Plan to Fight Ransomware Attackers
Silviu STAHIE

October 14, 2021

1 min read
Anonymous Domain Name Registration Could Disappear in the European Union Anonymous Domain Name Registration Could Disappear in the European Union
Silviu STAHIE

October 14, 2021

1 min read